Kenya has taken a definitive step toward regulating the previously uncharted world of cryptocurrencies and digital assets. For years, crypto activity in Kenya operated in a legal grey area, with investors and companies embracing bitcoin, NFTs and token trading on platforms that lacked clear licensing, oversight, or consumer safeguards. That uncertainty changes with the Virtual Asset Service Providers (VASP) Act, 2025, which came into force on 4 November 2025.
At its core, the VASP Act seeks to bring legal clarity, regulatory oversight, and consumer protection to Kenya’s virtual asset market, from crypto exchanges and wallet providers to brokers and payment processors. The law places licensing and supervisory authority with established financial regulators: the Central Bank of Kenya (CBK) and the Capital Markets Authority (CMA), which together are tasked with shaping the sector’s future.
Under the VASP Act, a virtual asset is defined as a digital representation of value that can be traded or transferred, and which can be used for payment or investment purposes, excluding purely internal tokens or digital assets that do not interact with wider markets.
Businesses offering virtual asset services, including exchanges, wallet storage, payment facilitation, custody and brokerage must now obtain a license before operating in or from Kenya. Licenses will be granted in line with regulatory guidance once detailed regulations are published by the National Treasury in consultation with CBK and CMA. So far, regulators have not yet issued any VASP licenses, and no company is legally authorized to operate until those implementing rules are in force.
The Act also requires licensed providers to adopt robust measures to combat money laundering, terrorism financing and proliferation financing, aligning Kenya with international standards set by bodies such as the Financial Action Task Force (FATF).
What does this Act mean for Kenyan companies and investors? For Kenyan fintechs, crypto startups, and international players eyeing the East African market, the VASP Act represents both risk and opportunity:
-Regulatory certainty: Companies can now plan with a clearer view of legal obligations, licensing pathways, and supervisory expectations. This reduces operational risk and opens doors for institutional investment that was previously deterred by uncertainty.
-Compliance Costs and Operational Shifts: Becoming a licensed VASP is not a low-barrier exercise. Companies will need internal compliance frameworks, AML/CFT systems, data protection controls, and audited financial reporting. These regulatory costs may be significant, especially for small ventures.
-Global Alignment and Competitive Advantage: Kenya’s move mirrors trends in jurisdictions such as South Africa, thus positioning the country as a credible destination for crypto business and investment. This could help local firms scale and attract cross-border partnerships.
-Consumer Protection and Trust: Users of virtual asset services can reasonably expect full transparency through disclosures of risk, clearer dispute resolution pathways, and authorized market participants: a contrast to the unregulated platforms that have collapsed in the past.
Kenya’s Virtual Asset Service Providers Act, 2025 is more than a crypto law; it is a framework for sustainable digital finance that balances innovation with investor protection and financial integrity. As the VASP regime takes practical shape with subsidiary regulations and licensing, the legal landscape for crypto in Kenya will continue to evolve: demanding vigilance, compliance readiness, and strategic planning from all market participants.